📰 Story

0.136.0

New Features TUI markdown now keeps web links clickable with OSC 8 metadata, and cramped tables switch to readable key/value records without losing link targets. ( #24472 , #24636 , #24825 ) Sessions can now be archived from the TUI with /archive or from the CLI with codex archive / codex unarchive ; archived sessions are protected from resume/fork until restored. ( #25027 , #25021 ) App-server integrations can resume a thread with its initial turns page, see richer MCP server status, and launch stdio mode with codex app-server --stdio . ( #23534 , #24698 , #24940 ) Remote execution setup now supports CODEX_API_KEY registration for approved OpenAI hosts, while remote-control websockets use short-lived server tokens instead of ChatGPT access tokens. ( #24666 , #24141 ) Windows admins get an alpha codex sandbox setup --elevated provisioning path, plus requirements support for allowed Windows sandbox implementations. ( #24831 , #23766 ) A feature-gated standalone image generation extension can run through the native Codex image artifact completion pipeline. ( #24723 , #24972 ) Bug Fixes ChatGPT auth refreshes tokens before the five-minute expiry window and shows a relogin-required path for reused refresh tokens instead of collapsing into a generic cloud error. ( #23546 , #24830 ) Command-safety hardening prevents /diff from running repository-provided Git helpers/hooks, avoids PowerShell parser execution on non-Windows hosts, and rejects browser-origin exec-server websocket hand